Web - Splunk Security Content

PaperCut NG Remote Web Access Attempt

Exploit Public-Facing Application

Exploit Public-Facing Fortinet FortiNAC CVE-2022-39952

Exploit Public-Facing Application

Exploit Public Facing Application via Apache Commons Text

Web Shell, Server Software Component, Exploit Public-Facing Application

Windows PowerShell IIS Components WebGlobalModule Usage

Server Software Component, IIS Components

Windows PowerShell Disable HTTP Logging

Impair Defenses, Disable Windows Event Logging, Server Software Component, IIS Components

Fortinet Appliance Auth bypass

Exploit Public-Facing Application

Windows Exchange Autodiscover SSRF Abuse

Exploit Public-Facing Application

AWS Defense Evasion Impair Security Services

Disable Cloud Logs, Impair Defenses

Spring4Shell Payload URL Request

Web Shell, Server Software Component, Exploit Public-Facing Application

Confluence Unauthenticated Remote Code Execution CVE-2022-26134

Server Software Component, Exploit Public-Facing Application

Splunk Protocol Impersonation Weak Encryption Configuration

Protocol Impersonation

VMware Workspace ONE Freemarker Server-side Template Injection

Exploit Public-Facing Application

VMware Server Side Template Injection Hunt

Exploit Public-Facing Application

F5 BIG-IP iControl REST Vulnerability CVE-2022-1388

Exploit Public-Facing Application

Web Spring Cloud Function FunctionRouter

Exploit Public-Facing Application

Web JSP Request via URL

Web Shell, Server Software Component, Exploit Public-Facing Application

SQL Injection with Long URLs

Exploit Public-Facing Application

Hunting for Log4Shell

Exploit Public-Facing Application

Log4Shell JNDI Payload Injection Attempt

Exploit Public-Facing Application

Java Class File download by Java User Agent

Exploit Public-Facing Application

Log4Shell JNDI Payload Injection with Outbound Connection

Exploit Public-Facing Application

Supernova Webshell

Web Shell

Detect DNS requests to Phishing Sites leveraging EvilGinx2

Spearphishing via Service

Detect web traffic to dynamic domain providers

Web Protocols

Detect malicious requests to exploit JBoss servers

Monitor Web Traffic For Brand Abuse

Detect attackers scanning for vulnerable JBoss servers

System Information Discovery